Subnets on the same interface

[andymul]

Here's the config I'm having an issue with:

ip address intf2 xxx.xxx.99.146 255.255.255.240

Also routed to the main IP of the PIX is:

xxx.xxx.99.0 / 255.255.255.224

Both blocks have static routes setup, no NAT.

This setup works, and everything on this interface can hit the outside and machines on other interfaces (with the proper conduits setup). However, they can't talk to each other. I.e. xxx.xxx.99.155 can't talk to xxx.xxx.99.2, which is in a different subnet. Did I do this horribly wrong?

Thanks.

 

[yizhar]

HI.

The pix will never send any packet to the interface it came from, not even an ICMP redirect.
So you'll need a layer 3 router (or switch) to do the job.
This can be a linux box with 3 NICs, or any other server, or a layer 3 switch, or an existing router, or...

You should re-check your network design so that no 2 subnets will be on the same phisical segment, without a router between them.

Bye
Yizhar Hurwitz

http://come.to/yizhar

http://teachers.sivan.co.il/yizhar